Skip to contentDebian Linux vulnerabilities
- debian linux, linux kernel +1 morenet: ll_temac: platform_get_resource replaced by wrong functionCVE-2024-35796Fix available5.5 Medium
- debian linux, linux kernel +1 moreKVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region()CVE-2024-35791Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: mac80211: check/clear fast rx for non-4addr sta VLAN changesCVE-2024-35789Fix available8.0 High
- debian linux, linux kernel +1 moretee: optee: Fix kernel panic caused by incorrect error handlingCVE-2024-35785Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: usb-audio: Stop parsing channels bits when all channels are found.CVE-2024-27436Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecpumap: Zero-initialise xdp_rxq_info struct before running XDP programCVE-2024-27431Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetrom: Fix data-races around sysctl_net_busy_readCVE-2024-27419Fix available4.7 Medium
- debian linux, linux kernel +1 moreipv6: fix potential "struct net" leak in inet6_rtm_getaddr()CVE-2024-27417Fix available5.5 Medium
- debian linux, linux kernel +1 moreBluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUESTCVE-2024-27416Fix available8.8 High
- debian linux, linux kernel +1 morertnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing backCVE-2024-27414Fix available7.8 High
- debian linux, linux kernel +1 moreefi/capsule-loader: fix incorrect allocation sizeCVE-2024-27413Fix available5.5 Medium
- debian linux, linux kernel +1 morepower: supply: bq27xxx-i2c: Do not free non existing IRQCVE-2024-27412Fix available5.5 Medium
- debian linux, linux kernel +1 morewifi: nl80211: reject iftype change with mesh ID changeCVE-2024-27410Fix available7.8 High
- debian linux, linux kernel +1 moreusb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBsCVE-2024-27405Fix available7.5 High
- libreoffice, debian linux, fedoraproject fedora +2 moreGraphic on-click binding allows unchecked script executionCVE-2024-3044Fix available6.5 Medium
- git, debian linux, fedoraproject fedora +2 moreGit's protections for cloning untrusted repositories can be bypassedCVE-2024-32465Fix available7.4 High
- git, debian linux, fedoraproject fedora +2 moreLocal Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directoryCVE-2024-32021Fix available3.9 Low
- git, debian linux, fedoraproject fedora +2 moreGit vulnerable to Remote Code Execution while cloning special-crafted local repositoriesCVE-2024-32004Public exploitFix available8.2 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of...CVE-2024-4777Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen importing resources using Web Workers, error messages would distinguish the difference...CVE-2024-4769Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a...CVE-2024-4768Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIf the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not...CVE-2024-4767Fix available4.3 Medium
- debian linux, linux kernel +1 moreio_uring: drop any code related to SCM_RIGHTSCVE-2023-52656Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +2 morefirewire: nosy: ensure user_length is taken into account when fetching packet contentsCVE-2024-27401Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +2 moreBluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeoutCVE-2024-27399Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreBluetooth: Fix use-after-free bugs caused by sco_sock_timeoutCVE-2024-27398Public exploitFix available8.0 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenet: gtp: Fix Use-After-Free in gtp_dellinkCVE-2024-27396Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +3 more +5 morenet: openvswitch: Fix Use-After-Free in ovs_ct_exitCVE-2024-27395Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +5 more +7 morePDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDFCVE-2024-4367Public exploitFix availableEPSS 70.7%8.8 High
- gnome glib, debian linux, fedoraproject fedora +7 more +9 moreAn issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a...CVE-2024-34397Fix available5.2 Medium
- pallets werkzeug, debian linux, fedoraproject fedora +2 moreWerkzeug's improper usage of a pathname and improper CSRF protection results in the remote command executionCVE-2024-34069Public exploitFix available7.5 High
- offis dcmtk, debian linux +1 moredcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.CVE-2024-34509Fix available5.3 Medium
- offis dcmtk, debian linux +1 moredcmnet in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.CVE-2024-34508Fix available4.3 Medium
- debian linux, linux kernel +1 moreSUNRPC: fix some memleaks in gssx_dec_option_arrayCVE-2024-27388Fix available9.8 Critical
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremedia: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entityCVE-2024-27077Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremedia: imx: csc/scaler: fix v4l2_ctrl_handler memory leakCVE-2024-27076Fix available5.5 Medium
- debian linux, linux kernel +1 moremedia: dvb-frontends: avoid stack overflow warnings with clangCVE-2024-27075Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moremedia: go7007: fix a memleak in go7007_load_encoderCVE-2024-27074Fix available5.5 Medium
- debian linux, linux kernel +1 moremedia: ttpci: fix two memleaks in budget_av_attachCVE-2024-27073Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 morenetfilter: nf_tables: do not compare internal table flags on updatesCVE-2024-27065Fix available7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreUSB: usb-storage: Prevent divide-by-0 error in isd200_ata_commandCVE-2024-27059Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: wilc1000: fix RCU usage in connect pathCVE-2024-27053Fix available8.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_workCVE-2024-27052Fix available7.8 High
- debian linux, linux kernel +1 moredrm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'CVE-2024-27044Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreclk: Fix clk_core_get NULL dereferenceCVE-2024-27038Fix available5.5 Medium
- debian linux, linux kernel +1 moreocteontx2-af: Use separate handlers for interruptsCVE-2024-27030Fix available7.8 High
- debian linux, linux kernel +1 morespi: spi-mt65xx: Fix NULL pointer access in interrupt handlerCVE-2024-27028Fix available6.5 Medium
- debian linux, linux kernel +1 moredrm/tegra: dsi: Add missing check for of_find_device_by_nodeCVE-2023-52650Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenbd: null check for nla_nest_startCVE-2024-27025Fix available5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet/rds: fix WARNING in rds_conn_connect_if_downCVE-2024-27024Fix available7.8 High
- Show moreLoading…